Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
File: 3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier: t981WL+lVWRLGveBXHVkcpK/kWgpz7ht+EV5sLfHXA4=
Subject key identifier: 44:4A:1B:40:57:5E:C1:81:01:86:AB:1A:63:15:45:4D:D6:D7:DD:B0
Certificate issuer: /CN=EC682C741A777F706745E6705BE4FAC8CE53C496
Certificate serial: 6301A460B80273E1AD96C08E28C243E5BF16FB3C
Authority key identifier: EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
Signing time: Mon 29 Jan 2024 22:13:03 +0000
ROA not before: Mon 29 Jan 2024 22:08:03 +0000
ROA not after: Mon 27 Jan 2025 22:13:03 +0000
asID: 265393
IP address blocks: 168.194.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:01:a4:60:b8:02:73:e1:ad:96:c0:8e:28:c2:43:e5:bf:16:fb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC682C741A777F706745E6705BE4FAC8CE53C496
Validity
Not Before: Jan 29 22:08:03 2024 GMT
Not After : Jan 27 22:13:03 2025 GMT
Subject: CN=444A1B40575EC1810186AB1A6315454DD6D7DDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:3a:7e:17:fb:b4:4f:84:fb:c4:91:00:43:
1e:8b:d2:18:0f:94:53:46:e9:60:6d:a8:f3:36:db:
39:fb:c3:b8:4e:13:cf:32:8a:af:0e:1a:3b:95:98:
c1:24:de:65:84:6f:b3:30:22:0b:b6:97:11:2f:dd:
02:11:38:16:c3:01:ca:13:c3:19:3a:f5:81:a6:bd:
53:98:18:fb:de:bc:c7:eb:5a:66:30:9d:5f:11:9f:
cc:a9:6d:46:90:3f:bb:cf:0e:73:45:cb:fa:fe:78:
f6:8a:10:da:72:c2:dd:6e:89:4f:16:bc:57:ae:f3:
9a:f2:c5:8d:f7:bd:b5:b8:29:a0:61:f6:85:d1:61:
9c:e3:4e:e6:cf:cd:6b:6f:13:10:50:89:25:ba:50:
b9:df:86:c3:d1:b9:2f:f7:2c:39:ce:e9:28:57:6b:
4c:f2:f0:59:a6:08:cc:55:22:17:67:95:61:2e:23:
a0:73:3e:01:f2:99:41:c0:7a:52:7c:73:af:d3:30:
e1:1d:65:92:ac:d6:fd:8a:45:2f:f8:71:32:d3:d3:
e5:47:14:7f:ac:32:1a:fb:d0:28:cd:bc:b7:6b:bf:
0c:58:ef:59:f8:34:6c:95:7d:91:95:7f:cc:a4:72:
2d:dd:e7:09:8f:a9:1d:da:72:fc:5f:97:8e:cf:8d:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:1B:40:57:5E:C1:81:01:86:AB:1A:63:15:45:4D:D6:D7:DD:B0
X509v3 Authority Key Identifier:
keyid:EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/EC682C741A777F706745E6705BE4FAC8CE53C496.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.165.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a3:75:00:94:e3:96:ff:87:cb:21:c7:a3:7d:68:36:01:6b:
6b:c6:c3:33:92:69:ad:6f:70:f3:e3:fc:0a:1c:0c:f1:61:6d:
94:7f:a0:37:f5:0f:f3:8d:38:bf:d3:b7:e0:8c:1d:67:bc:6f:
7a:fb:fb:69:8f:1c:ee:c6:f8:da:8f:4a:45:46:20:b6:ca:0b:
f8:45:a3:77:5d:78:e8:e1:b7:82:02:7e:89:bb:f1:a1:1f:8b:
ee:2f:d1:29:d4:8f:27:42:be:14:f2:44:62:51:e3:da:48:ad:
c6:4b:7f:94:83:5b:e8:a7:78:9d:cf:25:11:d0:a7:17:24:13:
c0:1f:83:7a:56:0d:b8:aa:1b:14:8a:c7:04:b7:42:0e:30:c9:
2b:20:bc:34:0c:99:a9:a4:dd:a0:60:43:a2:f9:37:d6:85:c2:
e3:53:82:84:19:cc:19:38:8c:37:d4:08:20:f9:26:38:d5:66:
d7:e8:a5:b6:72:47:62:51:14:73:98:55:f7:5b:aa:9e:01:af:
e9:88:4c:d9:29:de:ce:5e:92:bc:15:85:0a:36:68:12:70:9c:
9b:57:8e:98:19:f6:0d:a4:93:fb:a8:47:53:43:b0:69:2a:82:
d9:b7:8b:ad:a0:a3:9c:61:67:a5:60:1e:fd:7b:35:2b:6f:46:
9c:e9:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org